Login Request a demo
Medium severity · published Nov 23, 2021
CVE-2021-3672
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might…
5.6
CVSS
2.8%
EPSS
No
On KEV
Description
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
C-ares · C-ares Project
1.0.0 before 1.17.2 · source: NVD
EL
Enterprise Linux · Redhat
7.0; 7.7; 8.0 · source: NVD
EL
Enterprise Linux Computer Node · Redhat
1 · source: NVD
EL
Enterprise Linux Eus · Redhat
7.7; 8.1; 8.2; 8.4 · source: NVD
EL
Enterprise Linux For Ibm Z Systems · Redhat
8.0 · source: NVD
EL
Enterprise Linux For Ibm Z Systems Eus · Redhat
8.1; 8.2; 8.4 · source: NVD
EL
Enterprise Linux For Power Little Endian · Redhat
8.0 · source: NVD
EL
Enterprise Linux For Power Little Endian Eus · Redhat
8.1; 8.2; 8.4 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
8.2; 8.4 · source: NVD
EL
Enterprise Linux Server Tus · Redhat
8.2; 8.4 · source: NVD
EL
Enterprise Linux Server Update Services For Sap Solutions · Redhat
8.1; 8.2; 8.4 · source: NVD
EL
Enterprise Linux Tus · Redhat
8.4 · source: NVD
Affected product
CA
C-ares
C-ares Project
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-3672
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-3672
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1988342
Exploit
https://c-ares.haxx.se/adv_20210810.html
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
security.gentoo.org
https://security.gentoo.org/glsa/202401-02
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html
More from C-ares
9.8
CVE-2016-5180
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly…
8.6
CVE-2022-4904
A flaw was found in the c-ares package
7.5
CVE-2023-32067
c-ares is an asynchronous resolver library
7.5
CVE-2020-8277
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1…
7.5
CVE-2017-1000381
The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS…